You have probably heard of this a couple of times now, and you are likely thinking “what in the world is that”? Casual computer users had probably never heard of this logging software until it hit the headlines, but it’s used across the entire internet. The FTC defines it as: “Log4j is a ubiquitous piece of software used to record activities in a wide range of systems found in consumer-facing products and services. Recently, a serious vulnerability in the popular Java logging package, Log4j (CVE-2021-44228) was disclosed, posing a severe risk to millions of consumer products to enterprise software and web applications. This vulnerability is being widely exploited by a growing set of attackers.”
How long will it take for this vulnerability to be fixed across the entire ecosystem?
Per Google, It’s hard to say. We looked at all publicly disclosed critical advisories affecting Maven packages to get a sense of how quickly other vulnerabilities have been fully addressed. Less than half (48%) of the artifacts affected by a vulnerability have been fixed, so we might be in for a long wait, likely years.
But things are looking promising on the log4j front. After less than a week, 4,620 affected artifacts (~13%) have been fixed. This, more than any other stat, speaks to the massive effort by open source maintainers, information security teams and consumers across the globe. -Google
The Nerds are here to save you
As always, The Nerds are here to save you. If you need Computer repair, IT Support, IT Services or Managed IT Services in Austin, D/FW or in San Antonio, Call 877-250-8575 or you can book online by going to NerdsinaFlash.com and click the “Book Now” button in the upper right hand corner.
